Re: [SAtalk] Problem with email=no content

2003-12-02 Thread Robert Menschel
Hello Andrea, Thanks for the inspiration. Tuesday, December 2, 2003, 4:23:24 AM, you wrote: AR> Hi folks, AR> How could I filter spam with no content? AR> I've at the moment emails apparently without sender, without recips, without AR> subject or body. No sender? Given that information, I cre

Re: [SAtalk] Bayes DB Question

2003-12-02 Thread Robert Menschel
Hello Scott, Tuesday, December 2, 2003, 2:36:00 PM, you wrote: SR> 2. My spam directory is up to 564 MB. Should I be worried about size SR> at all? Eventual corruption? Is there a way to perform periodic DB SR> maintenance? Is it ok to delete spam received say a month ago, if it SR> has been

Re: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Bob Apthorpe
On Tue, 02 Dec 2003 15:29:37 -0600 Larry Rosenman <[EMAIL PROTECTED]> wrote: > --On Tuesday, December 02, 2003 16:26:11 -0500 Vee Persaud > <[EMAIL PROTECTED]> wrote: > > > [EMAIL PROTECTED] wrote: > > > BIG HUGE NEWS > > > This seems awesome. If I never used EvilRules before, is it easy t

Re: [SAtalk] Announce: CMOScript version 0.00.0.0001g available for download (REPOST)

2003-12-02 Thread Chris Thielen
Alexander Litvinov said: > Nice script... is it possible to learn SA automagicly use such logic ? Alexander, The integration is currently a manual process. I could envision an eval rule in the future but definately not now!. The easiest way to plug this into your mail system is to build a few

Re: [SAtalk] Correct score ?

2003-12-02 Thread Chris Thielen
O-Zone said: > in that server i've that config file: > > # http://spamassassin.org/tests.html . > # > # score SYMBOLIC_TEST_NAME n.nn > score MICROSOFT_EXECUTABLE 5.00 > > in that location: > > /home/spamfilter/.spamassassin > > that's the home dir of spamassassin user. > > I want to know WHY

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Larry Gilson
Thanks Chris - great work! --Larry > -Original Message- > From: Chris Santerre > > > BIG HUGE NEWS > > A major breakthrough has taken place > > ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into > 178 rules!!! Ramdon/tracking hosts tags removed! > > They only incr

[SAtalk] LOL - ascii art spam

2003-12-02 Thread Yackley, Matt
Damn are we back in the good old BBS days? :) I received this one today and damn near fell of my chair laughing. SA 2.55 only scored it at 2.36 points. From: Nicky [EMAIL PROTECTED] Sent: Tuesday, December 02, 2003 12:17 PM To: Antispam Subject: Dear Antispam! New teenagers photo and

[SAtalk] Re: SA questions

2003-12-02 Thread Bryan Hoover
Robert Menschel wrote: > You beat me to it ... I was going to suggest the same thing. I've been > feeding all of my list traffic through sa-learn for the past month, and > if anything it has improved my Bayes performance. I think the idea of bypassing list mail is efficiency - you know it's not

Re: [SAtalk] Re: SA questions

2003-12-02 Thread Robert Menschel
Hello Chris, Tuesday, December 2, 2003, 10:42:06 AM, you wrote: CB> Chuck Campbell <[EMAIL PROTECTED]> wrote: >> I also send all email which is ham through my sa-learn, with the >> exception of my high volume email lists, which procmail filters out >> before SA. CB> I've seen other people sa

[SAtalk] Re: How to make SA "learn" from spam?

2003-12-02 Thread Bryan Hoover
John Oliver wrote: > I'm led to believe I can feed untagged spam (and tagged non-spam) to SA > for it to "learn" how to be better. How do I do this? You were led right. Assuming mbox format mail file -- for instance, Netscape, Eurdora (and my FreeBSD account with qmail is mbox format) - you can

Re: [SAtalk] [RD] Proposed Rules -- Received

2003-12-02 Thread Robert Menschel
Hello Marcio, Tuesday, December 2, 2003, 3:12:04 AM, you wrote: >> header RM_hr_VirtuaComBr Received =~ /virtua\.com\.br/ >> describe RM_hr_VirtuaComBr Spam passed through relay known to be used by spammers >> scoreRM_hr_VirtuaComBr 1.690 # 69s/0h of 63143 corpus MM> You may want to ad

Re: [SAtalk] How to make SA "learn" from spam?

2003-12-02 Thread Matt Kettler
At 08:37 PM 12/2/2003, John Oliver wrote: I'm led to believe I can feed untagged spam (and tagged non-spam) to SA for it to "learn" how to be better. How do I do this? man sa-learn In general you want to feed it a good variety of spam and nonspam (aka ham) mail, not just FP/FN cases. However, fe

[SAtalk] How to make SA "learn" from spam?

2003-12-02 Thread John Oliver
I'm led to believe I can feed untagged spam (and tagged non-spam) to SA for it to "learn" how to be better. How do I do this? -- John Oliver, CCNAhttp://www.john-oliver.net/ Linux/UNIX/network consulting http://www.john-oliver.net/resume/ *****

RE: [SAtalk] Similar anti SPAM like this but, for Windows ?

2003-12-02 Thread Efren Pedroza
I'm so sorry, i was looking at a print copy, and on that that link seems not to be a link. I really appreciate your help and your patient. Best regards === Efren Pedroza Huerta -Original Message- From: M. [mailto:[EMAIL PROTECTED] Sent: M

[SAtalk] [OT] Thanks for another great year of SA!

2003-12-02 Thread Ray Dzek
In the last 6 months or so, our spam volume has tripled as I am sure it has for many of you. For the month of November, we topped out at over 110,000 spam emails into the company (yea for us?). 80,000+ were outright /dev/null'd for the obvious potty language, appendage enhancement, etc, etc. and

Re: [SAtalk] Bayes DB Question

2003-12-02 Thread Matt Kettler
At 05:36 PM 12/2/2003, Scott Renda wrote: I interpret them as someone who isn't using bayes right... ya need to train some ham messages my friend :) 0.000 0 2 0 non-token data: bayes db version Bayes database version 2. 0.000 0 49175 0 non-to

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Larry Rosenman
--On Tuesday, December 02, 2003 17:22:00 -0500 Chris Santerre <[EMAIL PROTECTED]> wrote: > ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into 178 rules!!! > Ramdon/tracking hosts tags removed! Thanks a lot for your work on this. BigEvilList_74 hit on a message we received from the Fina

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Mike Kuentz (2)
I can only think to say muhahahaha... Thanks for the work on this Chris! > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Chris Santerre > Sent: Tuesday, December 02, 2003 3:56 PM > To: Spamassassin-Talk (E-mail) > Subject: [SAtalk] BIG HUGE EVI

[SAtalk] Bayes DB Question

2003-12-02 Thread Scott Renda
Ladies & gents: I am running SA 2.60 with Postfix, it has simply done an amazing job since implemented. I did have several questions though. 1. Can anybody tell me how to read the values obtained from sa-learn --dump? The results of my dump are below: 0.000 0 2 0 non

Re: [SAtalk] Bayes expiry

2003-12-02 Thread Ted Cabeen
Yevgeniy Miretskiy <[EMAIL PROTECTED]> writes: > sa-learn stopped learning messages. Debugging shows that it can > successfully tie Bayes db, extracts tokens, etc, but never actually > writes data to the database. > > No matter what bayes_expiry_max_db_size is set to (I tried anything from 100K t

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Chris Santerre
> > ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into > 178 rules!!! > > Ramdon/tracking hosts tags removed! > > Thanks a lot for your work on this. > > BigEvilList_74 hit on a message we received from the > Financial Executives > Institute because it contained ...fasb.org. Is the F

Re: [SAtalk] Bayes problems

2003-12-02 Thread Jack Gostl
Well... I never say never, but I switched into the correct directory, checked with -V and it looks good. > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Jack Gostl writes: > > > >I need some help here guys. > > > >I have updated my Db to BerkeleyDB.4.2, I have reinstalled DB_file from

[SAtalk] Paris hilton rule

2003-12-02 Thread Dallas L. Engelken
ok, this crap is everywhere now. here is my rule, for those that are interested. run against your recent corpus data, since you wont find much of anything on data thats more than 1 month old. curious, has anyone had many paris hilton false negatives??? # Tue Dec 2 11:48:24 CST 2003 -- be

Re: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Rich Puhek
Chris Santerre wrote: BIG HUGE NEWS Looks like these will be taking a big huge bite out of my spam! Cool. 3 out of the first 4 spams to hit my SA install triggered a BigEvilList rule. Thanks for the effort you put into it. Now to see if the payment terms mean that I can write off purchase

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Marc Steuer
Chris, > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of Chris Santerre > Sent: Tuesday, December 02, 2003 12:56 PM > To: Spamassassin-Talk (E-mail) > Subject: [SAtalk] BIG HUGE EVIL RULE NEWS > BIG HUGE NEWS > A major breakthrough has taken place > ALL EVILRULE

Re: [SAtalk] Can't locate Mail/SpamAssassin/MIME.pm in @INC

2003-12-02 Thread Matt Kettler
At 04:47 PM 12/2/2003, Bruce Bresnahan wrote: Hi All, I am trying to get SpamAssassin-2.70 installed on a Solaris 8 (sparc)box. Where is MIME.pm? Which perl module do I need to install?? Any help greatly appreciated. System info and error mesg included below I'd strongly suggest NOT using SA 2.70 r

Re: [SAtalk] Bayes problems

2003-12-02 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jack Gostl writes: > >I need some help here guys. > >I have updated my Db to BerkeleyDB.4.2, I have reinstalled DB_file from >CPAN, then I wiped out my Bayes databases and started to rebuild from my >spam corpus. > >When I run db_verify I still get th

RE: [SAtalk] Similar anti SPAM like this but, for Windows ?

2003-12-02 Thread Efren Pedroza
Hello Fred, I'm trying to install SA on Win 2k Server, but when I'm following the instructions to install Perl (http://www.openhandhome.com/howtosa.html thanks to [EMAIL PROTECTED]); says that I've to download a copy of Net::DNS.12 but I can't found where do I've to download. Someone knows where c

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Jennifer Wheeler
Chris Santerre. I genuflect! Thanks for the effort. I must decline the hockey game; I live in the middle of basketball country and would have to make quite a pilgrimage to get to a game of any caliber. Would you settle for my switching from cokes to hot chocolates with coffee mate for a week

[SAtalk] Can't locate Mail/SpamAssassin/MIME.pm in @INC

2003-12-02 Thread Bruce Bresnahan
Hi All, I am trying to get SpamAssassin-2.70 installed on a Solaris 8 (sparc)box. Where is MIME.pm? Which perl module do I need to install?? Any help greatly appreciated. System info and error mesg included below. Thanks Bruce I have a fresh install of ActivePerl-5.8 with the following modules i

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Larry Rosenman
--On Tuesday, December 02, 2003 16:26:11 -0500 Vee Persaud <[EMAIL PROTECTED]> wrote: [EMAIL PROTECTED] wrote: BIG HUGE NEWS This seems awesome. If I never used EvilRules before, is it easy to start using it ? Do I have to modify any other config files ? nope. just drop it in the /etc/m

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Vee Persaud
[EMAIL PROTECTED] wrote: > BIG HUGE NEWS > > A major breakthrough has taken place > > ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into 178 > rules!!! Ramdon/tracking hosts tags removed! > > They only increase spamd memory by 1 meg!!! 1 meg! > > You read correctly! Every ev

[SAtalk] Bayes problems

2003-12-02 Thread Jack Gostl
I need some help here guys. I have updated my Db to BerkeleyDB.4.2, I have reinstalled DB_file from CPAN, then I wiped out my Bayes databases and started to rebuild from my spam corpus. When I run db_verify I still get these messages: db_verify: bayes_seen: hash version 5 requires a version upg

RE: [SAtalk] WhiteListing and newbie

2003-12-02 Thread Evan Platt
--On Tuesday, December 02, 2003 11:36 AM -0800 Evan Platt <[EMAIL PROTECTED]> wrote: > Depends on how your mail system is configured. Spamassassin by default > only checks incoming mail. As Matt pointed out to me in e-mail.. by default, spamassassin does nothing (or as I put it - by default it ta

Re: [SAtalk] Disable a User who does not want SA

2003-12-02 Thread Larry Rosenman
--On Monday, December 01, 2003 17:21:03 -0500 "Carl R. Friend" <[EMAIL PROTECTED]> wrote: On Mon, 1 Dec 2003, Obantec Support wrote: RH8.0 with SA2.60 installed as sitewide. Procmailrc is handling spam for all users and creates ~/.spamassassin/user_prefs ok. Now 1 customer has decided he d

Re: [SAtalk] Disable a User who does not want SA

2003-12-02 Thread Carl R. Friend
On Mon, 1 Dec 2003, Obantec Support wrote: > RH8.0 with SA2.60 installed as sitewide. > > Procmailrc is handling spam for all users and creates > ~/.spamassassin/user_prefs ok. > > Now 1 customer has decided he does not like spam filtered emails (cannot > please all). > > tried |/usr/bin/spa

Re: [SAtalk] Disable a User who does not want SA

2003-12-02 Thread Rich Puhek
I have a similar situation, so I created a script to look for "exempt" users, which I store in a flat text file. Here's my /etc/procmailrc: # # # # SpamAssassin # # # # :0fw # skip passing to spamc/spamd if user is on # exempt list, or

[SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Chris Santerre
BIG HUGE NEWS A major breakthrough has taken place ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into 178 rules!!! Ramdon/tracking hosts tags removed! They only increase spamd memory by 1 meg!!! 1 meg! You read correctly! Every evil domain since august has been added! Remov

Re: [SAtalk] Bayes DB

2003-12-02 Thread Theo Van Dinter
On Tue, Dec 02, 2003 at 01:06:55PM -0600, Bob Apthorpe wrote: > > 1. Can anybody tell me how to read the values obtained from sa-learn --dump? > > The results of my dump are below: > > > > 0.000 0 2 0 non-token data: bayes db version > > 0.000 0 49175

[SAtalk] procmailrc

2003-12-02 Thread Rich H.
Hello all, Figured out the error of my ways, (I'm such a bone head). Now I'm having a blast with both SA and procmail. Awesome combo!   Rich

RE: [SAtalk] WhiteListing and newbie

2003-12-02 Thread Matt Kettler
At 02:17 PM 12/2/2003, Billy A. Pumphrey wrote: Awesome thanks for the answer, for the second part. Does that one entry make it so that people can send to earthlink address also? No... this is strictly for mail *from* earthlink.. it has absolutely nothing to do with mail *to* earthlink. To do th

RE: [SAtalk] WhiteListing and newbie

2003-12-02 Thread Evan Platt
--On Tuesday, December 02, 2003 2:44 PM -0500 "Billy A. Pumphrey" <[EMAIL PROTECTED]> wrote: > That is beyond my knowledge. If you give me the commands to put into > the console, I would be happy to do it. :) Spamassassin is 'called' somehow, most often via a procmail script. If SpamAssassin is

RE: [SAtalk] WhiteListing and newbie

2003-12-02 Thread Evan Platt
--On Tuesday, December 02, 2003 2:17 PM -0500 "Billy A. Pumphrey" <[EMAIL PROTECTED]> wrote: > Awesome thanks for the answer, for the second part. Does that one entry > make it so that people can send to earthlink address also? Depends on how your mail system is configured. Spamassassin by defau

Re: [SAtalk] postmaster attachment

2003-12-02 Thread Casper Gasper
At 03:06 PM 12/2/03 +0800, Fritz Mesedilla wrote: I would like to ask if it is possible for spamassassin to include the spam email as an attachment when sending postmaster notifications. This way I can make a manual sa-learn. amavisd-new won't let you do this. It won't encapsulate mail as an

RE: [SAtalk] WhiteListing and newbie

2003-12-02 Thread Mike Kuentz (2)
perldoc Mail::SpamAssassin::Conf is the way to go for the docs or http://www.spamassassin.org/doc.html. whitelist_from_rcvd [EMAIL PROTECTED] earthlink.net You might not want to whitelist a large ISP, though. You could just do whitelist_from_rcvd [EMAIL PROTECTED] earthlink.net >From the docs

RE: [SAtalk] WhiteListing and newbie

2003-12-02 Thread Billy A. Pumphrey
Awesome thanks for the answer, for the second part. Does that one entry make it so that people can send to earthlink address also? Thank You Billy Pumphrey -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 02, 2003 2:15 PM To: Billy A. Pumphrey; [EM

Re: [SAtalk] Question (proposal?) about SA dev and its rules update.

2003-12-02 Thread Marcio Merlone
On Tue, 02 Dec 2003 11:22:46 -0500 Matt Kettler <[EMAIL PROTECTED]> wrote: > At 09:06 AM 12/2/03 -0200, Marcio Merlone wrote: > >But, as an end-user (I sys-admin some thousands of mail accounts), I > >think that the rules could be forked from SA, so community could > >treat SA as a spam-scanning e

Re: [SAtalk] WhiteListing and newbie

2003-12-02 Thread Matt Kettler
At 01:57 PM 12/2/2003, Billy A. Pumphrey wrote: I have been reading about Spamassassin and reading and found out, I think, how to white list a domain. I don't have it handy but its something to the affect of white_list_rcv @earthlink.net @earthlink.net. Would you correct me on the actual white

[SAtalk] Re: Rules Modification /Content Filtering Results

2003-12-02 Thread Chris Barnes
"Frank Pineau" <[EMAIL PROTECTED]> wrote in message > You could train it with a publicly-available corpus of spam, but that > sort of defeats the purpose of the bayesian filter. It's highly > personalized. My mother-in-law, for example, loves to get stuff from > QVC and other similar online shopp

Re: [SAtalk] Bayes DB

2003-12-02 Thread Bob Apthorpe
Hi, On Tue, 2 Dec 2003, Scott Renda wrote: > I am running SA 2.60 with Postfix, it has simply done an amazing job since > implemented. I did have several questions though. > > 1. Can anybody tell me how to read the values obtained from sa-learn --dump? > The results of my dump are below: > > 0.0

Re: [SAtalk] Re: SA questions

2003-12-02 Thread Matt Kettler
At 01:42 PM 12/2/2003, Chris Barnes wrote: > I also send all email which is ham through my sa-learn, with the > exception of my high volume email lists, which procmail filters out > before SA. I've seen other people say this. My question is "why NOT send the listserv traffic through sa-learn a

[SAtalk] SA 2.60 not logging - solaris 9

2003-12-02 Thread Sam Kalet
> The mailhub is a Sun Solaris 9 ultra 10 with perl 5.8.0 .. > Also noticed that we get the > > unix passed to setlogsock, but path not available at >/usr/local/bin/spamd line 280 I recall reading something about the syslog perl module having problems logging to Solaris' syslogd via a unix

[SAtalk] Re: Rules Modification /Content Filtering Results

2003-12-02 Thread Chris Barnes
Arlo Gilbert <[EMAIL PROTECTED]> wrote: > I'm getting a common response here which is to lean towards bayes > rather than score manipulation. > > However, bayes takes so long to build up. Especially if grandma only > gets 2 or 3 spams a day. Given that SA refuses to use bayesian > filtering til aft

[SAtalk] WhiteListing and newbie

2003-12-02 Thread Billy A. Pumphrey
I have been reading about Spamassassin and reading and found out, I think, how to white list a domain.  I don’t have it handy but its something to the affect of white_list_rcv @earthlink.net @earthlink.net.  Would you correct me on the actual white list line and how do I make it so that I c

[SAtalk] Bayes DB

2003-12-02 Thread Scott Renda
Ladies & gents: I am running SA 2.60 with Postfix, it has simply done an amazing job since implemented. I did have several questions though. 1. Can anybody tell me how to read the values obtained from sa-learn --dump? The results of my dump are below: 0.000 0 2 0 non

[SAtalk] Re: SA questions

2003-12-02 Thread Chris Barnes
Chuck Campbell <[EMAIL PROTECTED]> wrote: > I also send all email which is ham through my sa-learn, with the > exception of my high volume email lists, which procmail filters out > before SA. I've seen other people say this. My question is "why NOT send the listserv traffic through sa-learn a

[SAtalk] Re: Re: How to config Spam Assassin to reject spam > x.xx

2003-12-02 Thread Chris Barnes
Robert Harrison <[EMAIL PROTECTED]> wrote: > However I use qmail-scanner which primarily is a virus-scanner which > supports SA. I can't see how to get qmail-scanner to drop mail if it > is spam. > > Perhaps its time for a patch. Or some clever sod out there who knows > more than me ;-) There is

[SAtalk] Re: Re: How to config Spam Assassin to reject spam > x.xx

2003-12-02 Thread Chris Barnes
Mark <[EMAIL PROTECTED]> wrote: > What you are looking for, it seems, is a way to reject messages at > the SMTP level, right? Indeed, recent comments to the contrary > despite, this can be done with SpamAssassin. But you need a different > implementation of SpamAssassin for that, integrated into a

Re: [SAtalk] Disable a User who does not want SA

2003-12-02 Thread Matt Kettler
At 03:25 PM 12/1/2003, Obantec Support wrote: tried |/usr/bin/spamassasin -x in procmailrc since i read no user_prefs no spam handling. Um.. no.. SA can run without a user_prefs, and without creating one. tried ~/.no-spamfilter Er.. not sure what that would do, never heard of that file before.

Re: [SAtalk] Disable a User who does not want SA

2003-12-02 Thread Christopher M. Iarocci
Obantec Support wrote: Hi All RH8.0 with SA2.60 installed as sitewide. Procmailrc is handling spam for all users and creates ~/.spamassassin/user_prefs ok. Now 1 customer has decided he does not like spam filtered emails (cannot please all). tried |/usr/bin/spamassasin -x in procmailrc since i r

RE: [SAtalk] RE: Re: How to config Spam Assassin to reject spam > x.xx

2003-12-02 Thread Evan Platt
--On Tuesday, December 02, 2003 10:35 AM -0500 Vee Persaud <[EMAIL PROTECTED]> wrote: > You wouldn't believe how many "FAQ"s, archives and links are out there > and sometimes it's just not what you want or it just doesn't quite suit > your purpose. Someone's previous live experience gives you tha

RE: [SAtalk] empty e-mails

2003-12-02 Thread Aaron Young
On Tue, 2 Dec 2003, Gary Funck wrote: > As it stands, this recipe only checks that the there is a line whose > first charcater is not a space or a tab. And if this sort of mesage is > found, it is deposited in the spam folder. Likely not what was intended. Oops, you are right. This is probably w

Re: [SAtalk] More .procmailrc

2003-12-02 Thread Bart Schaefer
On Tue, 2 Dec 2003, Rich H. wrote: > This is a copy of the logs: Looks like you may have edited the .procmailrc on a Windows machine and ended up with Windows-style line endings on the added lines (that is, both a carriage-return and a linefeed). Procmail only understands Unix line endings (line

Re: [SAtalk] Question (proposal?) about SA dev and its rules update.

2003-12-02 Thread Matt Kettler
At 09:06 AM 12/2/03 -0200, Marcio Merlone wrote: But, as an end-user (I sys-admin some thousands of mail accounts), I think that the rules could be forked from SA, so community could treat SA as a spam-scanning engine and the rules would be the spam database, like an anti-virus package. This would

Re: [SAtalk] Rules Modification /Content Filtering Results

2003-12-02 Thread Arlo Gilbert
I'm getting a common response here which is to lean towards bayes rather than score manipulation. However, bayes takes so long to build up. Especially if grandma only gets 2 or 3 spams a day. Given that SA refuses to use bayesian filtering til after it has collected 200 spam samples, in my exam

[SAtalk] Trashed Bayes

2003-12-02 Thread Jack Gostl
Based on the discussions here and elsewhere, I upgraded by db libs to the current release, reinstalled DB_File, restarted spamd, and then just for good measure wiped my Bayes files and my autowhitelist files and ran my corpus through it. Here is the output from the process, starting and ending wi

Re: [SAtalk] SA 2.60 bayes_journal oddities

2003-12-02 Thread Theo Van Dinter
On Tue, Dec 02, 2003 at 03:46:17PM +0200, Vesa-Matti J Kari wrote: > Can somebody explain why does this happen? I read a reply from the > archives that said something to the effect that this does not have to do > with learning. What is the point of this behavior, then? It has to do with expiry. E

RE: [SAtalk] RE: Re: How to config Spam Assassin to reject spam > x.xx

2003-12-02 Thread Vee Persaud
[EMAIL PROTECTED] wrote: > On 1 Dec 2003 Vee Persaud ([EMAIL PROTECTED]) wrote: so do any of you nice people out there know how to delete / reject tagged spam with a score of greater than say 15. >>> >>> This is described in the SA documentation and lots of other places, >>> for example

RE: [SAtalk] Question (proposal?) about SA dev and its rules upda te.

2003-12-02 Thread Chris Santerre
A one stop rule place is in the works. Mine is only version .0001 alpha :) Link in sig. Chris Santerre System Admin and SA Custom Rules Emporium keeper http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm "A little nonsense now and then, is relished by the wisest men." - Willy Wo

RE: [SAtalk] Evilrules update and some more notes.

2003-12-02 Thread Chris Santerre
> -Original Message- > From: Mike Kuentz (2) [mailto:[EMAIL PROTECTED] > Sent: Tuesday, December 02, 2003 8:53 AM > To: Chris Santerre; Spamassassin-Talk (E-mail) > Subject: RE: [SAtalk] Evilrules update and some more notes. > > > Are the old ones somehow merged in with the new ones? If

[SAtalk] Problem with email=no content

2003-12-02 Thread Andrea Riela
Hi folks, How could I filter spam with no content? I've at the moment emails apparently without sender, without recips, without subject or body. An header for example: Received: (qmail 7648 invoked by uid 1008); 2 Dec 2003 07:07:01 - Received: from [EMAIL PROTECTED] by observe.nesys.it by ui

Re: [SAtalk] Re: An Open Letter to the SA-talk forum

2003-12-02 Thread alan premselaar
On 12/2/03 3:20 PM, "Kenneth Porter" <[EMAIL PROTECTED]> wrote: (B (B> --On Tuesday, December 02, 2003 10:57 AM +0900 alan premselaar (B> <[EMAIL PROTECTED]> wrote: (B> (B>> vi ~/.procmail (and add appropriate config lines to call spamassassin or (B>> spamc) (B>> chkconfig spamd on (B>> se

Re: [SAtalk] spamc -d setting

2003-12-02 Thread Matt Kettler
At 02:26 PM 12/1/2003, Douglas Kirkland wrote: I am confused about how the -d setting works in spamc. Can I set two different domains for the domain setting in spamc without using DNS for the two spamd servers? I was think I could have the setting like: spamc -d primary.spamd.com, secondary.spamd

[SAtalk] Problem with email=no content

2003-12-02 Thread Andrea Riela
Hi folks, How could I filter spam with no content? I've at the moment emails apparently without sender, without recips, without subject or body. An header for example: Received: (qmail 7648 invoked by uid 1008); 2 Dec 2003 07:07:01 - Received: from [EMAIL PROTECTED] by observe.nesys.it by ui

RE: [SAtalk] SA: Moving spam mails(sitewide) to a separate Dir/Account

2003-12-02 Thread Mike Kuentz (2)
SA doesn't move mail. We'd need to know more about your setup to help you out. Postfix/qmail/procmail, versions, how you get mail from your MTA to SA, etc. Mike > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Mail Monitor > Sent: Tuesday, De

RE: [SAtalk] Evilrules update and some more notes.

2003-12-02 Thread Mike Kuentz (2)
Are the old ones somehow merged in with the new ones? If big scary spammers already purchased the domain for 2 years or whatever amount of time the standard is, chances are it'll get used again. I have some domains that I put in my own rules close to a year ago, and still see them get hit sometim

[SAtalk] SA: Moving spam mails(sitewide) to a separate Dir/Account (fwd)

2003-12-02 Thread Mail Monitor
Sorry, I forgot to add that I'm using sendmail 8.12.6+SA 2.60 on FreeBSD 4.7 -- Forwarded message -- Date: Tue, 2 Dec 2003 19:21:54 +0530 (IST) From: Mail Monitor <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: SA: Moving spam mails(sitewide) to a separate Dir/Account Hi,

[SAtalk] SA 2.60 bayes_journal oddities

2003-12-02 Thread Vesa-Matti J Kari
Hello all, Here is a short summary of what we're trying to accomplish. GOAL: To recognize junk mails with a site wide SpamAssassin installation PROGRAMS: Sendmail 8.12.10 + Miltrassassin + Spamd/SA 2.60 PROBLEM: SpamAssassin's bayesian subsystem does not seem to behave as expected (?) Our

[SAtalk] SA: Moving spam mails(sitewide) to a separate Dir/Account

2003-12-02 Thread Mail Monitor
Hi, How do I configure SA to move all mails marked as spam for all accounts/inboxes residing on the same system where SA has been installed to a different directory/account? (System level filtering) I would also appreciate any help to achieve the same on a mail gateway, which relays mail to user

RE: [SAtalk] A special new website

2003-12-02 Thread Matt Van Gordon
Sorry, I meant to send that to the spam-learning acount but it went to this list instead. -Original Message- From: Charles Gregory [mailto:[EMAIL PROTECTED] Sent: Monday, December 01, 2003 11:59 AM To: Matt Van Gordon Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] A special new website And

RE: [SAtalk] Correct score ?

2003-12-02 Thread Alan Munday
Oz It is not so clear from a header when the mail does not get marked as spam. In you example there is "tests=BAYES_00" this will be reducing the score as the Bayes engine has attributed a very low probability of this message being spam. It has therefore reduced by the score by the default amount

Re: [SAtalk] Rules Modification /Content Filtering Results

2003-12-02 Thread Frank Pineau
On Mon, 2003-12-01 at 17:38, Arlo Gilbert wrote: > Is there a faster way to get SA working? Because 90 days is a long time > to ask somebody to wait. You could train it with a publicly-available corpus of spam, but that sort of defeats the purpose of the bayesian filter. It's highly personaliz

Re: [SAtalk] SA questions

2003-12-02 Thread Matt Kettler
At 02:55 PM 12/1/2003, Chuck Campbell wrote: Do I need or want "special" rules to help with these spams slipping through? (POPCORN, BACKHAIR, WEEDS, WEEDS2, etc.) If so, how do I use them (meaning specifically where do they need to be placed so SA can use them)? Some of the rules at th

[SAtalk] Correct score ?

2003-12-02 Thread O-Zone
Hi all, here's my problem: Date: Tue, 2 Dec 2003 14:28:25 +0200 X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on domini.tdsiena.it X-Spam-Level: *** X-Spam-Status: No, hits=3.7 required=5.0 tests=BAYES_00,HTML_90_100, HTML_MESSAGE,MICROSOFT_EXECUTABLE,MIME_HTML

[SAtalk] Announce: CMOScript version 0.00.0.0001g available for download

2003-12-02 Thread Chris Thielen
Greetings all! CMOScript version 0.00.0.0001g is now available for download. CMOScript (Chris's Mediocre Obfuscation Script) generates rules for SpamAssassin that match on obfuscated words such as "V|AGR@" or "V.I.A.G.R.@". Using the Obfu Only option (-o), you can generate rules that match on no

[SAtalk] RESOLVED - whitelist seems to be ignored?

2003-12-02 Thread Jon Bendtsen
Sorry for the trouble, but i managed to find the error :) JonB --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help

[SAtalk] Re: hit-frequencies (was: Ideas/RD)

2003-12-02 Thread Robert Menschel
Hello Justin, Monday, December 1, 2003, 10:19:32 AM, you wrote: JM> Robert, BTW -- JM> were you saying previously that you couldn't get hit-frequencies JM> working? Could you remind me what was up there? I might be able to JM> help. Minor handicap: I'm a domain user on a shared virtual domain

Re: [SAtalk] [RD] Proposed Rules -- Received

2003-12-02 Thread Marcio Merlone
On Mon, 1 Dec 2003 22:25:40 -0800 Robert Menschel <[EMAIL PROTECTED]> wrote: > header RM_hr_VirtuaComBr Received =~ /virtua\.com\.br/ > describe RM_hr_VirtuaComBr Spam passed through relay known to be used by > spammers > scoreRM_hr_VirtuaComBr 1.690 # 69s/0h of 63143 cor

[SAtalk] Question (proposal?) about SA dev and its rules update.

2003-12-02 Thread Marcio Merlone
Hello all, I've been using SA for some months now with great success. Its rule scheme is very efficient and straight-forward when you learn some regexp. But, as an end-user (I sys-admin some thousands of mail accounts), I think that the rules could be forked from SA, so community could treat SA a

Re: [SAtalk] Disable a User who does not want SA

2003-12-02 Thread Obantec Support
- Original Message - From: "Mark Muller" <[EMAIL PROTECTED]> To: "'Obantec Support'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, December 01, 2003 9:27 PM Subject: RE: [SAtalk] Disable a User who does not want SA > all_spam_to [EMAIL PROTECTED] should do it. > > > -Orig

[SAtalk] whitelist seems to be ignored?

2003-12-02 Thread Jon Bendtsen
Hi spamassassin mailing list. I'm trying to avoid this email getting tagged as spam. at first i just tried to edit the user_prefs file, but after that didnt work i read http://useast.spamassassin.org/doc/Mail_SpamAssassin_Conf.html whitelist_from [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECT

Re: [SAtalk] Re: How to config Spam Assassin to reject spam > x.xx

2003-12-02 Thread Robert Harrison
For any other poor sods out there using qmail-scanner see http://xoomer.virgilio.it/j.toribio/qmail-scanner/ This looks like it will do the trick. TTFN r --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net he

Re: [SAtalk] Re: How to config Spam Assassin to reject spam > x.xx

2003-12-02 Thread Robert Harrison
I'm not offended. I agree if I used procmail I should be shot if I could not figure this out. RTFM and all that. However I use qmail-scanner which primarily is a virus-scanner which supports SA. I can't see how to get qmail-scanner to drop mail if it is spam. Perhaps its time for a patch. Or so

[SAtalk] More .procmailrc

2003-12-02 Thread Rich H.
This box is running RH 7.0 with procmail 3.22-7. What is the proper format of the .procmailrc file? I don't think I have ever seen something so picky. I have my file set up exactly like this: SHELL=/bin/sh PATH=/bin:/usr/bin MAILDIR=$HOME/m

RE: [SAtalk] empty e-mails

2003-12-02 Thread Gary Funck
As it stands, this recipe only checks that the there is a line whose first charcater is not a space or a tab. And if this sort of mesage is found, it is deposited in the spam folder. Likely not what was intended. > -Original Message- > From: Aaron Young > Sent: Monday, December 01, 2003

RE: [SAtalk] .procmailrc

2003-12-02 Thread Gary Funck
In addition, this looks wrong: > :0: > * ^X-Spam-Flag: YES > /Spamfolder It looks as if you're trying to deposit the spam into a folder that lives just below the root directory. Perhaps you meant: :0: * ^X-Spam-Flag: YES Spamfolder > -Original Message- > From: Martin Radford > Sent: Mon

Re: [SAtalk] .procmailrc

2003-12-02 Thread Martin Radford
At Tue Dec 2 07:19:42 2003, Rich H. wrote: > > Hello again, > I am playing with different recipies of procmailrc, and I am still = > having some time with features of .procmailrc files. I added a line like > > :0: > * ^X-Spam-Flag: YES > /Spamfolder > > In the headers of my message I get > > X

RE: [SAtalk] postmaster attachment

2003-12-02 Thread Fritz Mesedilla
Thanks Matt! I am using amavisd-new with spamassassin and clamav. As mail is relayed to an exchange server, headers are somewhat changed and the needed spam headers are not as accurate anymore. If the spam email can be attached to the notification then I can perform the manual sa-learn. Thanks

[SAtalk] .procmailrc

2003-12-02 Thread Rich H.
Hello again, I am playing with different recipies of procmailrc, and I am still having some time with features of .procmailrc files. I added a line like   :0:* ^X-Spam-Flag: YES/Spamfolder     In the headers of my message I get   X-Spam-Flag: YES     Yet in the log file I have set up I get a

Re: [SAtalk] Announce: CMOScript version 0.00.0.0001g available for download (REPOST)

2003-12-02 Thread Alexander Litvinov
Nice script... is it possible to learn SA automagicly use such logic ? On Вторник, 2 Декабрь 2003 12:27, Chris Thielen wrote: > Greetings all! > > (I'm reposting this announcement as the original seems to have gotten lost > in the SourceForge scheduled downtime) > > CMOScript version 0.00.0.0001g

  1   2   >